Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83cc0315-c685-3344-afae-e001edafbf6a.roa
File:                     83cc0315-c685-3344-afae-e001edafbf6a.roa (raw, json)
Hash identifier:          uvTSDFJ9r2XGrEvG2U6pTT2oSMorkezvGD3dIgWbefA=
Subject key identifier:   03:81:FB:03:65:A5:9D:12:3B:CC:10:40:79:4B:6E:38:29:65:80:00
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285842B33F308EDE69502492ACE9C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83cc0315-c685-3344-afae-e001edafbf6a.roa
Signing time:             Thu 27 Jul 2023 12:00:00 +0000
ROA not before:           Thu 27 Jul 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.68.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b3:3f:30:8e:de:69:50:24:92:ac:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 27 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=70ad95e6-3a4e-43d3-9b32-7e820cb2d25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:c6:de:9a:c2:6b:4a:04:a3:25:b2:2f:bb:
                    9e:b0:2d:99:e0:cd:88:9d:fa:7b:84:75:28:ab:55:
                    77:dc:55:dc:d4:95:9b:ce:f5:55:f6:06:a4:7a:34:
                    f7:6e:4a:92:93:cb:1e:49:e6:79:92:8a:05:77:a4:
                    b4:34:ab:22:49:0f:85:82:f8:de:10:63:9f:22:5e:
                    59:58:af:b3:f9:4b:b4:91:e9:de:ee:4f:17:20:4e:
                    52:d7:ef:4b:c6:9f:e2:e0:14:7c:eb:e4:9b:86:91:
                    04:25:85:23:e5:49:1e:bb:48:d0:fa:3a:68:ee:f6:
                    51:85:b4:3a:ed:2e:7f:72:f3:16:1a:00:7f:62:25:
                    39:17:3c:67:94:a8:6b:da:61:90:f8:d9:20:4f:12:
                    c2:c4:f4:85:07:b4:7c:ee:37:da:e6:92:ac:03:fe:
                    e3:b7:32:ac:c0:53:ae:72:9c:de:cf:9e:37:0a:7c:
                    75:e0:83:12:80:82:90:a9:e9:f9:85:d2:0d:e5:dc:
                    b1:0c:71:a8:c6:9a:bd:7b:74:6b:cd:48:82:e6:3a:
                    d3:07:80:63:68:03:13:7b:28:36:a8:2b:f7:e1:6f:
                    3c:c2:47:fc:79:83:af:9a:28:d8:dd:95:f9:95:28:
                    ab:f5:d4:cd:a7:40:bf:f0:ac:20:0a:01:01:27:5c:
                    81:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:81:FB:03:65:A5:9D:12:3B:CC:10:40:79:4B:6E:38:29:65:80:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83cc0315-c685-3344-afae-e001edafbf6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:f4:7b:33:4c:ab:a4:39:76:38:37:39:fe:56:0e:61:bc:
         99:0c:b3:09:73:60:ae:cf:7c:72:96:24:a8:57:c7:a7:5d:9b:
         16:b9:e5:ed:ae:29:86:f9:f4:91:47:b4:68:4a:9c:45:fe:bd:
         8d:01:51:a7:0d:35:b9:bc:f5:a3:bf:2d:c9:e0:87:f0:69:20:
         54:e7:62:f8:fc:31:48:94:ea:7a:6e:f5:07:a0:52:e4:7d:a7:
         72:6b:14:92:ad:21:d6:ec:44:59:d0:5d:27:90:7e:83:ad:50:
         e9:3f:d8:10:72:96:77:52:06:54:13:13:19:74:de:e9:97:6f:
         57:c6:ae:47:fc:18:66:b9:a9:18:64:c4:7b:f6:03:92:dc:01:
         92:40:f6:32:82:21:3d:2e:65:7e:42:94:a1:46:a5:a0:59:56:
         e1:43:df:a3:10:19:a2:f5:a5:ae:5c:dc:f8:0f:84:b8:f4:6f:
         93:2b:09:9a:5f:0d:19:a9:c3:1a:1b:53:81:57:9b:8c:c0:e5:
         cf:3e:63:d2:19:11:32:71:0e:0e:dd:02:99:10:d4:76:f3:db:
         ee:c2:09:4d:cd:49:6b:5a:b4:ab:dd:a8:90:84:2b:a0:50:5b:
         56:07:39:cf:9f:f1:6a:4b:9d:4d:3b:9c:78:22:2a:cb:92:55:
         8b:bf:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----